CVE-2025-58190 affecting package helm for versions less than 3.14.2-10

CVE-2025-58190 affecting package helm for versions less than 3.14.2-10. A patched version of the package is available...

CVE-2025-39945 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-39945 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-39724 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-39724 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-0838 affecting package abseil-cpp for versions less than 20220623.0-2

CVE-2025-0838 affecting package abseil-cpp for versions less than 20220623.0-2. A patched version of the package is available...

CVE-2025-39757 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-39757 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-22982 affecting package kernel for versions less than 5.15.200.1-1

CVE-2026-22982 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38609 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38609 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-30204 affecting package kube-vip-cloud-provider for versions less than 0.0.2-26

CVE-2025-30204 affecting package kube-vip-cloud-provider for versions less than 0.0.2-26. A patched version of the package is available...

CVE-2025-47911 affecting package kubernetes for versions less than 1.28.4-25

CVE-2025-47911 affecting package kubernetes for versions less than 1.28.4-25. A patched version of the package is available...

CVE-2025-47911 affecting package cf-cli for versions less than 8.4.0-27

CVE-2025-47911 affecting package cf-cli for versions less than 8.4.0-27. A patched version of the package is available...

CVE-2025-58190 affecting package telegraf for versions less than 1.29.4-21

CVE-2025-58190 affecting package telegraf for versions less than 1.29.4-21. A patched version of the package is available...

CVE-2025-47911 affecting package gh for versions less than 2.13.0-26

CVE-2025-47911 affecting package gh for versions less than 2.13.0-26. A patched version of the package is available...

CVE-2026-25727 affecting package azl-compliance for versions less than 1.0.2-3

CVE-2026-25727 affecting package azl-compliance for versions less than 1.0.2-3. A patched version of the package is available...

CVE-2025-39894 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-39894 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38459 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38459 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-2919

Malicious scripts could display attacker-controlled web content under spoofed domains in Focus for iOS by stalling a self navigation to an invalid port and triggering an iframe redirect, causing the UI to display a trusted domain without user interaction. This vulnerability was fixed in Focus for...

CVE-2026-3089 Actual Sync Server 26.2.1 - Authenticated Path Traversal

Actual Sync Server allows authenticated users to upload files through POST /sync/upload-user-file. In versions prior to 26.3.0, improper validation of the user-controlled x-actual-file-id header means that traversal segments ../ can escape the intended directory and write files outside...

CVE-2026-3089 Actual Sync Server 26.2.1 - Authenticated Path Traversal

Actual Sync Server allows authenticated users to upload files through POST /sync/upload-user-file. In versions prior to 26.3.0, improper validation of the user-controlled x-actual-file-id header means that traversal segments ../ can escape the intended directory and write files outside...

GHSA-74CF-PGH9-M5Q2 Apache IoTDB has an Insecure Default Configuration Vulnerability

A vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 1.3.7, from 2.0.0 before 2.0.7. Users are recommended to upgrade to version 1.3.7 or 2.0.7, which fixes the issue...

CVE-2026-24713

Improper Input Validation vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 1.3.7, from 2.0.0 before 2.0.7. Users are recommended to upgrade to version 1.3.7 or 2.0.7, which fixes the issue...